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Please amend the application as follows prior to examination on the merits. 
IN THE CLAIMS 

Please cancel claims 1-10 and add the attached new claims 1 1-20. 
REMARKS 

Prior to a formal examination of the above-identified application, acceptance of the 
new claims and the enclosed substitute specification (under 37 CFR 1.125) is respectfully 
requested. It is believed that the substitute specification and the new claims will facilitate 
processing of the application in accordance with M.P.E.P. 608.01 (q). The substitute 
specification and the new claims are in compliance with 37 CFR 1.52 (a and b) and, while 
making no substantive changes, are submitted to conform this case to the formal 
requirements and long-established formal standards of U.S. Patent Office practice, and to 
provide improved idiom and better grammatical form. 

The enclosed substitute specification is presented herein in both marked-up and 
clean versions. 

STATEMENT 

The undersigned, an agent registered to practice before the Office, hereby states 
that the enclosed substitute specification includes the same changes as are indicated in 
the marked-up copy of the original specification. It does not contain new subject matter. 



Respectfully submitted, 




Craig Hallacher 
Registration No. 54,896 
Continental Teves, Inc. 
One Continental Drive 
Auburn Hills, Ml 48326 
(248) 393-6518 
Agent for Applicants 
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SUBSTITUTE SPECIFICATION: MARKED COPY 
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Method for the Recognition and/or Correction of Memory Access 
Errors and Electronic Circuit Arrangement for Carrying Out Said 
Method 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates to a method for the 
detection and/or correction of memory access errors in a 
processor system, wherein test data generated in addition to data 
which is to be secured, using the latter data, is stored inside a 
memory. The invention further relates to an electronic circuit 
arrangement, in particular for implementing a method of this type 
with an error detection device connected to a processor core and 
to a memory. 

[0002] The term ^processor system' in general implies 
individual or also network computer systems such as 
microcontrollers which, apart from a central processing unit 
(CPU) additionally comprise memories and input/output functions. 
These systems can be designed as systems with one processor core, 
or in particular several processor cores, and two or more central 
processing units referred to as processor cores are provided as 
in a multi-core system. 

[0003] Methods of the above-mentioned type can be used in 
particular for monitoring and for error correction of memories in 
safety-critical applications which can be used especially in an 
electronic motor vehicle control element. A concept of this type 
may, thus, take influence on the architecture of the memory for a 
motor vehicle processor in particular. 
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[0004] In the course of technical development, electronic 
control units for motor vehicle brakes assume functions of the 
brake system at an increasing rate. In former brake systems, only 
the anti-lock (ABS) function was generally controlled and 
regulated electronically, while in more modern so-called 'by- 
wire' brake systems the complete braking function can be checked 
by the electronic control unit. On account of the direct safety 
relevance of systems of this type, there is an increasing demand 
in electronic motor vehicle control units offering a particularly 
high degree of reliability. 

[0005] Usually electronic motor vehicle control units comprise 
programmed microprocessor systems for mastering the comparative 
complex functions. To . improve the reliability of microprocessor 
systems of this type, so-called error detection systems or 
devices are employed which produce test data when storing data in 
a memory by using the data to be secured, storing the test data 
jointly with the data to be secured. When reading out the data 
again, it can be found out in a subsequent step by using the test 
data stored along with the first mentioned data whether a read- 
out error occurred. 

[0006] The reliability of a motor vehicle processor system can 
also be improved according to DE 101 09 449 in that when reading 
flash memories by way of the microprocessor, parity bits are 
stored for each word / half word in the same memory module or in 
a separate memory . module . Parity bits are also generated during 
the memory access and compared with the stored test data for the 
purpose of an error check. 

[0007] In methods known in the art for the detection and/or 
correction of memory access errors, the test data is usually 
generated by means of error correction codes such a Hamming Code 
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or a Berger Code and stored on the respective memory in order to 
correct transient errors, extend the guaranteed useful life of a 
product, or increase the output in the manufacture by masking 
manufacturing defects. 

[0008] In application memories which are especially configured 
as a flash memory, however, only complete segments can be deleted 
and programmed. A flash memory with comparatively small segments 
requires a considerably larger surface compared to a flash memory 
with larger segments. Therefore, the size of the segments is 
limited downwards due to manufacture. As it is required to 
program and delete individual program parts and data parts 
independently of each other (both the data and the . associated 
parity) , and the smallest segment size of the parity is limited, 
comparatively large areas of unused memory result with system 
architectures of this type. 

[0009] An object of the invention is to improve a method of the 
above-mentioned type in such a manner that a particularly high 
degree of reliability can be achieved in error . detection and 
correction. Another objective is to disclose an electronic 
circuit arrangement which is especially appropriate for 
implementing the method. 

SUMMARY OF THE INVENTION 

[0010] As regards the method, this object is achieved by the 
invention in that the data's addresses are taken into account in 
addition to the data to be secured when generating the test data. 

[0011] Herein, the invention is based on the consideration that 
in previous concepts for error detection and correction, the 
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corresponding routines or devices are integrated into the memory 
wrapper and allow a direct check of the data field only. 
Transmission errors when reading out the data, which might occur 
e.g. due to addressing faults or similar faults, are left 
unconsidered in this arrangement. In order to enhance the 
reliability in error detection and error correction, as the case 
may be, the addressing operation should therefore be included in 
the check. To ensure this provision in a particularly simple 
manner, the test data is generated by considering the data to be 
secured, on the one hand, and by considering its addresses, on 
the other hand. 

[0012] Herein, a particularly high degree of reliability in 
error detection and error correction, as the case may be, can be 
reached in that, favorably, data to be secured is transmitted 
jointly with its associated test data to a data receiver, and the 
test data is evaluated for error detection only after the data 
transfer. Error detection and correction is thus shifted to the 
receiver of the data so that monitoring and error correction of 
both the data field and the memory wrapper with address coding 
and the data/address lines is safeguarded. 

[0013] In a further or alternative improvement, the test data 
is evaluated for error detection in an error detection device 
checked by a checking unit. Thus, the detection and/or correction 
of possible errors is in turn monitored by an own checking unit. 
In another favorable embodiment, the checking unit produces 
comparative test data from data and addresses which are compared 
with test data of the error detection device and/or with test 
data of a memory connected to the error detection device. As this 
occurs, check bits are calculated from the corrected data and the 
addresses of the second CPU and compared with the possibly 
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corrected check bits from the memory. A method of this type is, 
hence, appropriate in particular for the application with two or 
more processor cores. 

[0014] To further enhance the reliability and operational 
safety, advantageously, separate bus lines are used for the 
transmission of data, test data, and addresses between the error 
detection device and an application memory. 

[0015] As regards the electronic circuit arrangement for 
implementing the method including an error detection device 
connected to a processor core and a memory, the mentioned object 
is achieved in that the error detection device comprises a test 
data generator which generates test data for the data to be 
stored in the memory by way of this data and by way of its 
addresses . 

[0016] To achieve a particularly high degree of reliability and 
operational safety, the error detection device is advantageously 
shifted out of the memory core to a receiver of the data. In this 
arrangement, the error detection device is favorably connected to 
the memory by way of a number of bus lines, and in another 
favorable embodiment the bus lines are separated in such a 
fashion that separate bus lines are respectively provided for 
data, test data, and addresses. 

[0017] A checking unit is associated with the error detection 
device in another favorable embodiment. 

[0018] The advantages achieved by the invention particularly 
involve that an especially high rate of reliability and 
operational safety in error detection and correction can be 
reached by including the addresses in the generation of the test 
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data and, more particularly, also by shifting the error detection 
and correction out of the memory core into the area of a receiver 
for the data. This is because the addresses and in particular the 
address decoding logic is also examined in the error detection in 
addition to the actual data. Further, checking and a possible 
error correction of the data and address lines is ensured. The 
thereby attainable extension of error detection to the 
transmission conduits can be significant especially in external 
components having long connection conduits to the processor core 
which are comparably susceptible to disturbances. 

[0019] The error detection in the address decoder is especially 
favorable if only one single address decoder shall be used due to 
design. The additionally provided checking unit for the error 
detection per se can, thus, be made available likewise for this 
error detection. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0020] An embodiment of the invention will be explained in 
detail by making reference to the accompanying drawings. In the 
drawings : [ [ , ] ] 

[0021] Figure 1 is a schematic view of an electronic circuit 
arrangement . 

[0022] Figure 2 is a schematic view of an alternative 
embodiment of an electronic circuit arrangement. 

[0023] Like parts have been assigned like reference numerals in 
both of the Figures. 
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DETAILED DESCRIPTION OF THE DRAWINGS 



[0024] The electronic circuit arrangement 1 of Figure 1 is 
provided in particular for use in the electronic control system 
for motor vehicle brakes. In order to ensure a particularly high 
rate of reliability and operational safety on account of the 
great safety relevance with respect to possible interventions 
into current driving situations, the electronic circuit 
arrangement 1 is designed for error detection and, as the case 
may be, error correction in data processing operations. For this 
purpose, the electronic circuit arrangement 1 comprises an error 
detection device 6 which is connected at the data end between a 
processor core 2 also referred to as central processing unit or 
CPU, and a memory 4 associated therewith. The special purpose of 
the error detection device 6 is to safeguard a high rate of 
reliability of the read-out data D when relaying data D from the 
memory 4 into the processor core 2, and to reliably detect any 
errors found and correct them, if needed. 

[0025] The memory 4, in which data D is stored, comprises a 
memory area 10 for data D and another memory area 12 for test 
data P associated with data D in addition to a memory wrapper 8 
provided for the address decoding and memory management. 

[0026] The error detection device 6 comprises a test data 
generator 14, a bus logic device 16, and a correction block 18. 
The error detection device 6 is connected to the memory 4 by way 
of a number of bus lines 20, 22, 24, and the bus line 20 is 
provided in the type of an address line for transmitting address 
data to the memory wrapper 8, the bus line 22 is provided in the 
type of a data line for transmitting data D to the memory segment 
10, and the bus line 24 is provided in the type of a code line 
for transmitting test data to the memory segment 12. 
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[0027] To safeguard a particularly high rate of reliability in 
error detection and, as the case may be, error correction, the 
error detection device 6 is designed to generate the test data P 
provided for the data D to be secured, on the one hand, in 
consideration of data D, yet also in consideration of its 
addresses, on the other hand. To this end, the test data 
generator 14 on the inlet side is connected to the processor core 
2 both by way of a data line 26 and by way of a branch line 28 
connected to the first bus line 20 provided as an address line. 
The test data P thus generated in consideration of data D and the 
addresses can subsequently be transferred from the test data 
generator 14 to the bus logic device 16, from where data is 
relayed by way of the bus line 24 to the memory 4 for storage. 

[0028] In addition, the circuit arrangement 1 is designed to 
evaluate the test data P for error detection only after the data 
transmission to a receiver for data D. The error detection device 
6, while avoiding integration into the memory 4, is configured as 
a separate component connected to the memory 4 by way of bus 
lines 20, 22, 24 to this end. In the evaluation of the data D 
read out of the memory 4 and the test data P associated with data 
D in the correction block 18, in which also the addresses are 
considered, error detection is thus carried out not only for the 
actual data D but also for the transmission lines and addresses 
required for the data transmission. 

[0029] The electronic circuit arrangement 1 in the embodiment 
of Figure 1 is configured as a processor unit with only one 
processor core. In contrast thereto, the embodiment of Figure 2 
shows an embodiment with two processor cores wherein a further 
processor core 30 designed as CPU is provided in addition to the 
first processor core 2. In this embodiment a checking unit 32 
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being configured as an error detection device is moreover 
associated with the error detection device 6. In this 
arrangement, the error detection device 6 supplies by way of a 
data line 34 reading data L to the first processor core 2 and 
also to the second processor core 30. Reading data L represents 
data already corrected by the error detection device 6. The 
reading data L is further sent to a check bit generator 36 in the 
checking unit 32 which generates test data or check bits P by way 
of the reading data L and addresses A submitted by the second 
processor core 32. The test data or check bits are compared in a 
comparison unit 38 with corrected check bits or test data P 
transmitted by the error detection device 6 so that the proper 
functioning of the error detection device 6 can be checked. The 
comparison module 38 sends an error message as an output signal 
through its outlet channel 40 in case of need. The same applies 
to the checking unit 6, through the outlet channel 41. 
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Abstract : 



The objective is to develop a method for the detection and/or 
correction of memory access errors in a computer system, — wherein 
test 

Disclosed is a system and method for the detection and/or 
correction of memory access errors in computer systems. Test 
data (P) is generated in addition to data (D) which is to be 
secured, using the latter data (D), and is stored inside a memory 
(4) in such a fashion that a particularly high rate of 
reliability in error detection and correction can be achieved. To 
this end, in addition to the data (D) to be secured, the data's 
addresses are taken into account according to the invention 
present system and method when generating the test data (P) . 

Figure 1 
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